Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1. Server1 runs Windows Server 2012 R2.
You create a group Managed Service Account named gservice1.
You need to configure a service named Service1 to run as the gservice1 account.
How should you configure Service1?
A.
From the Services console, configure the Log On settings.
B.
From a command prompt, run sc.exe and specify the privs parameter.
C.
From a command prompt, run sc.exe and specify the sdset parameter.
D.
From Windows PowerShell, run Set-Service and specify the -StartupType parameter.
Explanation:
Setting permissions on specific services can be achieved by using the sc command.
The sc command has two parameters for this task:
sdshow – Displays the security descriptor for a specific service
sdset – Changes the security descriptor for a service
To set permissions use the following syntax:
sc <server> sdset <service name> <SD in SDDL format>
SET PERMISSIONS ON A SPECIFIC SERVICE (WINDOWS)
http://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/